General

  • Target

    arm7

  • Size

    164KB

  • Sample

    250203-v7elgszlar

  • MD5

    008fdd8c2beef87f5867fee4e701567f

  • SHA1

    5a38dfe83701e3df0b5130784f1911278fe434e6

  • SHA256

    835bfb6ea37ae5493544d9ff4d1c99d7f8479ff71a36d9457af5ce2ff66b0ab9

  • SHA512

    84b198f3691961c3aaa3dbba018d1eb06c8cb0ee238364251ac170f820bb0aa368674286d66c3b9419d199c016f3a9da33e4b40ef87c6aecde09488006bac349

  • SSDEEP

    3072:hcloB4DEIlGG8DG2a2Awjo7DA3TA9Aw1YSwbZn5R6Bh7M/9C8rs3b:ul/HroG2a2Awjo7DiTAxLwR5R6BNM/96

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Targets

    • Target

      arm7

    • Size

      164KB

    • MD5

      008fdd8c2beef87f5867fee4e701567f

    • SHA1

      5a38dfe83701e3df0b5130784f1911278fe434e6

    • SHA256

      835bfb6ea37ae5493544d9ff4d1c99d7f8479ff71a36d9457af5ce2ff66b0ab9

    • SHA512

      84b198f3691961c3aaa3dbba018d1eb06c8cb0ee238364251ac170f820bb0aa368674286d66c3b9419d199c016f3a9da33e4b40ef87c6aecde09488006bac349

    • SSDEEP

      3072:hcloB4DEIlGG8DG2a2Awjo7DA3TA9Aw1YSwbZn5R6Bh7M/9C8rs3b:ul/HroG2a2Awjo7DiTAxLwR5R6BNM/96

    • Contacts a large (23366) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

MITRE ATT&CK Enterprise v15

Tasks